Commit graph

55 commits

Author SHA1 Message Date
ekultek
83e0a5a436 updates to the XSS scanner, will successfully output if possible sqli is present or not, and only display the information once 2017-09-27 18:02:55 -05:00
ekultek
09d3bf1067 created a flag for you to pass a file to try attacks with, this way you can just attack the targets found after searching 2017-09-27 14:14:08 -05:00
ekultek
166e918223 patched the XSS scanner, should work better now 2017-09-27 10:35:39 -05:00
ekultek
4ba8a8a0f4 close the display and browser after exception has been caught 2017-09-26 18:30:50 -05:00
ekultek
526807c7ff basic implement of Google IP bypass done (more work to be done) 2017-09-26 18:20:43 -05:00
ekultek
90d3798a93 created an XSS scanner for issue #8 2017-09-26 12:56:35 -05:00
Thomas Perkins
ed4820b8ee Merge pull request #12 from cclauss/modernize-python2-code
Fix urllib imports for Python 3
2017-09-25 14:14:37 -05:00
cclauss
a84dd12e91 Remove unneeded changes 2017-09-25 21:10:58 +02:00
cclauss
b708f5627f Modernize Python 2 code to get ready for Python 3 2017-09-25 21:06:02 +02:00
Thomas Perkins
f471f7b217 Merge pull request #11 from cclauss/patch-1
Conditional import of http_client for Python 3
2017-09-25 12:24:42 -05:00
cclauss
9b4672e098 Conditional import of http_client for Python 3
As discussed in #7
2017-09-25 19:20:12 +02:00
ekultek
0b07d367e4 created a disclaimer that you have to accept to run the program. this will be shown once during the first run of the program. 2017-09-25 12:06:07 -05:00
ekultek
759a8d47c1 added a flag for nmap arguments, will also display a reference to sqlmap and nmap option man page if you have any questions 2017-09-25 11:27:56 -05:00
ekultek
6875605c98 patch for issue #2 install xvfb if it isn't there, also added it to the README requirements. 2017-09-25 11:08:32 -05:00
Thomas Perkins
204a7e1741 Merge pull request #6 from cclauss/patch-1
Simplify with dict comprehension
2017-09-25 10:49:33 -05:00
cclauss
73486352ec Simplify with dict comprehension
https://docs.python.org/2/tutorial/datastructures.html#dictionaries
2017-09-25 17:19:46 +02:00
Thomas Perkins
ab26aed61e Merge pull request #5 from cclauss/patch-2
Simplify with 'or'.  'Else pass' is unnecessary
2017-09-25 09:42:52 -05:00
cclauss
b7fb8350d8 Simplify with 'or'. 'Else pass' is unnecessary 2017-09-25 16:28:50 +02:00
Thomas Perkins
47e4b07584 Merge pull request #3 from cclauss/patch-1
Define raw_input() for Python 3
2017-09-25 09:23:24 -05:00
cclauss
5186a0e533 Define raw_input() for Python 3
__raw_input()__ is called on lines 276 and 283 but it was removed from Python 3 in favor of __input()__.
2017-09-25 13:55:43 +02:00
ekultek
97ff5610c1 minor update to the spider, and errors thrown by it 2017-09-21 10:29:25 -05:00
ekultek
d0a0a8b9c5 patch for issue #1. Way to be the firstgit add --all 2017-09-21 10:14:42 -05:00
ekultek
909c817b6e patched an issue where the selenium proxy was not working 2017-09-20 17:36:19 -05:00
ekultek
36259f3a12 created an admin page finder for the found URL's 2017-09-20 17:19:20 -05:00
ekultek
47561c3aab added the ability to create arguments for nmap 2017-09-18 15:25:42 -05:00
ekultek
98e0c6b8b6 minor update so that if no hosts are found it will not default to the last log file 2017-09-14 13:42:04 -05:00
ekultek
3042b2e24c created a scan for Intel ME exploit 2017-09-13 16:38:54 -05:00
ekultek
6b4cc87e9d minor update when skipping a URL during sqlmap API scan 2017-09-11 11:48:56 -05:00
ekultek
2987f13021 created a website spider, will pull all useable URL's from a given webpage 2017-09-11 11:43:53 -05:00
ekultek
03498f3d9f created a website spider, will pull all useable URL's from a given webpage 2017-09-11 11:43:41 -05:00
ekultek
74bf299e27 added an option to use a random proxy from a given proxy file list 2017-09-11 09:47:08 -05:00
ekultek
d36447d6da edited the proxy and user agent settings for selenium 2017-09-11 09:46:39 -05:00
ekultek
9900109a25 bumped version number 2017-09-11 09:46:03 -05:00
ekultek
ac89b9fc97 removed unused import 'time' 2017-09-11 09:45:39 -05:00
ekultek
729e9ee6dc bumped version number 2017-09-10 08:51:49 -05:00
ekultek
5aa3b19ec7 increased scanning time, sqlmap will scan faster now and not sleep as long 2017-09-10 08:51:36 -05:00
ekultek
bc02651e78 edited so that the type in the output won't be messed up 2017-09-10 08:50:41 -05:00
ekultek
7dc6d9b510 minor fix 2017-09-09 15:43:03 -05:00
ekultek
a4cb2646c1 fixed untracked files issue #2 2017-09-09 15:28:59 -05:00
ekultek
83f639f70d created random dork function and bumped version number 2017-09-09 08:37:32 -05:00
ekultek
118c0f1d2d edited the warning message to tell people they need to restart the sqlmap API server each iteration 2017-09-09 08:36:47 -05:00
ekultek
115054b5e1 created a new flag for random dork searching 2017-09-09 08:36:05 -05:00
ekultek
e1a86f6c0b edited to include to pip install 2017-09-08 18:47:20 -05:00
ekultek
567c300f7e edited the bin folder to be included, bin/executed is not included, minor change to main file 2017-09-08 18:42:53 -05:00
ekultek
14d5a1dbd1 fixed untracked files issue 2017-09-08 17:01:42 -05:00
ekultek
e89c13dc2c proxies are now compatible with selenium, the search engine will not longer see your IP address if a proxy is used 2017-09-08 14:27:32 -05:00
ekultek
6023e1628c bumped version number, edited saying 2017-09-08 14:26:57 -05:00
ekultek
a5e204731f edited the nmap scan, it will work successfully and skip if nothing is found 2017-09-08 14:26:29 -05:00
ekultek
92baed3a9f edited the get_urls function to obfuscate user-agent changes 2017-09-08 10:12:24 -05:00
ekultek
b22180a82d minor change to output the current URL before sqlmap scan 2017-09-07 20:55:06 -05:00